Secunia Research has discovered a vulnerability in Lotus Notes, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error in kvarcve.dll when constructing the full pathname of a compressed file to check for its existence before extracting it from a ZIP archive. This can be exploited to cause a stack-based buffer overflow. Successful exploitation allows execution of arbitrary code when the user extracts a compressed file with a long filename from within the Notes attachment viewer. Affected versions is Lotus Notes 6.5.4.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43737/secunia-LotusNotesZIP.txt
Source: https://packetstormsecurity.com/files/43737/secunia-LotusNotesZIP.txt.html